
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: K8q9kF0Z22nnTse+Nla4yYA5hoknU+OFmxS9KUApb+A=
Subject key identifier: 82:F6:D4:A9:98:DD:9B:16:45:0D:55:3D:CA:D1:88:20:75:C3:F9:56
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 0197B6A165A1490D7A5E799CF87D41A1EE67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:01:59 +0000
Manifest this update: Sat 28 Jun 2025 13:01:59 +0000
Manifest next update: Sun 29 Jun 2025 13:01:59 +0000
Files and hashes: 1: TsaeWiaMsP1j_z_xMCDhi5soRx0.roa (hash: cFv4JeYxc6KlGhF0oX6eBMNahY8RJkA5Wg3CLEjEyhU=)
2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: 2KOglSdCRymzlb39vlxHtYX4pvwS2eyD1kyL2ETqqnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:65:a1:49:0d:7a:5e:79:9c:f8:7d:41:a1:ee:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Jun 28 13:01:59 2025 GMT
Not After : Jun 29 13:01:59 2025 GMT
Subject: CN=82f6d4a998dd9b16450d553dcad1882075c3f956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:ff:dd:5f:73:b3:f6:9e:43:fa:a8:8e:cc:
e2:98:50:f2:db:08:e9:95:d9:b2:88:95:3a:f5:de:
50:97:94:10:7f:98:43:50:56:50:0c:e8:04:0c:0a:
81:6e:78:b5:5a:ea:9d:c8:7f:93:04:71:74:c6:ca:
2c:98:7c:f8:f0:02:c9:e5:92:a9:f8:1a:6e:41:76:
7c:f7:34:ae:38:0f:c2:ce:e6:50:72:98:97:cb:53:
54:4e:49:78:49:52:90:a0:e0:dc:16:22:13:94:db:
56:80:21:a6:e2:98:7c:c8:1c:47:f1:67:9c:bf:53:
c9:91:c0:06:49:db:06:30:97:30:5f:4a:ca:4d:71:
02:e8:cd:f2:4e:97:75:44:61:31:69:95:60:21:4d:
7d:83:30:02:b3:e6:a3:71:d5:9d:10:cc:05:b4:5e:
93:c8:aa:24:c5:02:22:40:04:a5:ee:88:0d:91:1a:
2b:27:69:26:09:6a:c7:62:00:fb:f9:ab:af:5e:05:
9b:ad:bd:17:cf:f7:20:1c:41:7a:2f:32:3a:9e:d8:
ff:38:2f:9c:9e:a8:31:88:1b:e3:98:18:e4:0b:72:
51:ab:fe:ca:d0:4a:ca:31:75:88:b6:01:c9:7a:64:
62:35:82:87:d5:b9:ec:74:c6:d5:3f:70:0a:fe:8d:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F6:D4:A9:98:DD:9B:16:45:0D:55:3D:CA:D1:88:20:75:C3:F9:56
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8a:a7:d7:1d:1a:ad:b0:91:50:eb:4c:2d:8d:a6:07:5b:89:
8e:cd:24:9d:24:c2:fa:f1:ee:cb:7a:7e:dc:3c:5c:3e:e5:00:
91:00:2a:b5:7c:dc:d4:cc:98:c4:59:df:fd:30:a9:27:af:79:
31:d4:76:14:5c:c8:70:eb:09:b9:38:79:3a:87:34:b2:77:b5:
9d:82:2a:dc:1d:26:99:56:fc:56:47:ea:fd:b5:b6:e7:58:da:
ce:a8:49:da:1b:86:4e:92:cb:90:1a:7b:bc:ed:39:b4:4d:63:
7b:47:f8:5e:f0:1f:c8:5d:b5:49:9f:4f:9d:85:49:6c:ba:8b:
d9:23:ce:20:0f:80:69:65:0e:37:d4:d2:da:85:08:cf:4e:fe:
5d:3d:65:3b:05:61:1d:66:e8:88:30:e8:d0:da:e5:f6:e3:96:
76:65:44:53:a7:fc:ec:54:be:c2:48:3c:b0:b7:e4:55:cb:67:
e1:ca:19:29:45:db:db:88:fc:b4:e5:73:9c:eb:ae:2c:61:e0:
db:c8:15:22:60:87:9d:c4:f5:e9:b7:15:0d:c7:93:7d:2c:e4:
ed:72:cf:9c:b0:65:94:ee:ad:74:90:7e:b3:83:61:6f:ee:74:
9e:c9:57:ea:31:d1:83:63:45:8f:e9:1a:92:0b:4a:3a:52:b7:
bc:c5:7f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:17 2025 by rpki-client